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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Previously Presented) A network comprising: 

IPsec processing apparatuses, which use an IPsec (Internet Protocol security protocol) 
for encrypting and authenticating communications via the Internet between two different 
centers; and 

an IPsec setting apparatus, which manages IPsec settings of the IPsec processing 
apparatuses, 

wherein in response to receiving a request from a first IP processing apparatus to 
communicate with a second IPsec processing apparatus, the IPsec setting apparatus transmits 
a request to the second IPsec processing apparatus and upon receiving a reply to the request 
from the second IPsec processing apparatus the IPsec setting apparatus transmits a common 
encryption key to the first and second IPsec process apparatuses to be used to encrypt and 
authenticate IPsec communications between the first and second process apparatuses. 

2. (Cancelled) 

3. (Previously Presented) The network of claim 1, 

wherein the second IPsec processing apparatus transmits a request for the 
communication message as a reply to the request received from the IPsec setting apparatus. 

4. (Previously Presented) The network of claim 1 , 

wherein when there is no response from the second IPsec to the request from the IPsec 
setting apparatus the IPsec setting apparatus notifies the first IPsec processing apparatus that 
there is no response from said second IPsec processing apparatus. 

5. (Previously Presented) The network of claim 1 , 

wherein said IPsec setting apparatus generates SA (Security Association) parameters, 
to be used in the IPsec communication between the first and the second IPsec processing 
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apparatuses, based on the contents of the request message and contents of IPsec policies 
stored by the IPsec setting apparatus. 

6. (Currently Amended) The network of claim [[l]] 5, 

wherein said IPsec setting apparatus sends a distribution message including the 
policies of said IPsec and the SA parameters in response to the request message. 

7. (Currently Amended) The network of claim 1 , 

wherein said IPsec setting apparatus generates the common encryption key to be used 
in encryption and authentication of the IPsec communications between the first IPsec 
processing apparatus and the second IPsec processing apparatus and transmits the generated 
common encryption key to the said IPsec processing apparatus. 

8. (Currently Amended) An IPsec setting apparatus managing IPsec setting of 
IPsec processing apparatuses, which use an IPsec (Internet Protocol security protocol) for 
securing communication via the Internet between two different centers, 

wherein said IPsec setting apparatus manages IPsec policies applied among the IPsec 
processing apparatuses, and 

wherein said IPsec setting apparatus specifies the IPsec policies to be applied between 
a first IPsec processing apparatus, requesting communication with a second IPsec processing 
apparatus, and the second IPsec processing apparatus, based upon contents of the request to 
the IPsec setting apparatus from the first IPsec processing apparatus for communication with 
the second IPsec processing apparatus , said IPsec setting apparatus generating a common 
encryption key to be used in encryption and authentication of IPsec communication and 
distributes the generated common encryption key to the first and second IPsec processing 
apparatuses . 

9. (Cancelled) 

10. (Previously Presented) The IPsec setting apparatus of claim 8, 
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wherein said IPsec setting apparatus upon receiving the request message from the first 
IPsec processing apparatus, transmits a request startup message to the second IPsec 
processing apparatus, which is an opposite party of communication of the first IPsec 
processing apparatus which has transmitted the request message, in order to cause the second 
IPsec processing apparatus to transmit a request message for the communication. 

1 1 . (Previously Presented) The IPsec setting server apparatus of claim 1 0, 
wherein the IPsec setting apparatus, when there is no response to the request startup 

message from the second IPsec processing apparatus, notifies the first IPsec processing 
apparatus which has transmitted the request message that there is no response from the 
second IPsec processing apparatus of the opposite party of communication. 

1 2. (Previously Presented) The IPsec setting apparatus of claim 8, 

wherein said IPsec setting apparatus generates SA (Security Association) parameters 
used in the IPsec communication between the first IPsec processing apparatus and the second 
IPsec processing apparatus based upon the contents of the request message and contents of 
the IPsec policies stored by the IPsec setting apparatus 

13. (Previously Presented) The IPsec setting apparatus of claim 8, 

wherein said IPsec setting apparatus simultaneously transmits to the first IPsec 
processing apparatus and to the second IPsec processing apparatus a message including at 
least the policies and the SA parameters for IPsec communication between the first IPsec 
processing apparatus and the second IPsec processing apparatus in response to the request 
message. 

14. (Canceled) 

1 5. (Currently Amended) An IPsec processing apparatus using an IPsec (Internet 
Protocol security protocol) on the Internet, 

wherein said IPsec processing apparatus receives from an IPsec setting apparatus 
managing communication a packet containing the IPsec to be applied to communications with 
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another IPsec processing apparatus, determines whether or not to request from the IPsec 
setting apparatus a setting for IPsee communication, and wherein the IPsec processing 
apparatus transmits a request for communication with the other IPsec processing apparatus to 
the IPsec setting apparatus in order to receive from the IPsec setting apparatus a setting for 
IPsec communication , the IPsec processing apparatus received from the IPsec setting 
apparatus a common encryption key to be used in encryption and authentication of said IPsec 
communication . 

16. (Cancelled) 

17. (Previously Presented) The IPsec processing apparatus of claim 15, 
wherein, upon receiving a request startup message from an IPsec setting apparatus the 

IPsec processing apparatus transmits a request for communication with another IPsec 
processing apparatus to the EPsec setting apparatus. 

18. (Previously Presented) The IPsec processing apparatus of claim 1 5, 
wherein said IPsec processing apparatus includes means for setting an SPD (Security 

Processing Database), in which policies for applying said IPsec is recorded, and an SAD 
(Security Association Database), in which an SA (security Association) necessary for 
subjecting an individual communication to the IPsec processing is stored, based upon a 
message received from the IPsec setting apparatus. 

19. (Canceled) 

20 (Previously Presented) The IPsec processing apparatus of claim 1 5, 

wherein the IPsec processing apparatus retransmits the request for communication to 

the IPsec setting apparatus and receives new setting information before a term of validity for 

the SA expires. 

21 . (Currently Amended) An IPsec setting method for a network comprising: 
receiving from a first IPsec processing apparatus a request for communication with a 
second IPsec processing apparatus; 
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in response to the received request, sending a request to the second IPsec processing 
apparatus, 

receiving a reply to the sent request from the second IPsec processing apparatus, 
in response to the reply from the second IPsec processing apparatus, retrieving IPsec 
policy rules from memory and g e nerating IPsoo settings param e ters based on the content of 
the request from the first IPsec processing apparatus and the retrieved policy rules , generating 
a common encryption key to be used in encryption and authentication of IPsec 
communication between the first and second IPsec processing apparatuses; and 

transmitting th e g e n e rated IPs e c s e ttinga to th e first and se cond EPo e c p roc e ssing 
apparatuses 

transmitting the generated common encryption key to first and second IPsec 
processing apparatuses . 

22. (Cancelled) 

23. (Previously Presented) The IPsec setting method of claim 21 , 

wherein the request sent to the second IPsec is a startup message and the reply 
received from the second IPsec is a request for the communication. 

24. (Previously Presented) The IPsec setting method of claim 2 1 , 

wherein when there is no reply to the request sent to the second IPsec processing 
apparatus, notifying the first IPsec processing apparatus that there is no response from the 
second IPsec processing apparatus. 

25. (Previously Presented) The IPsec setting method of claim 2 1 , 

further including in response to a reply from the second IPsec processing apparatus, 
generating SA (Security Association) parameters to be used in the IPsec communication 
between the first and second IPsec processing apparatuses based on contents of the request 
from the first IPsec processing apparatus message and the retrieved policy rules. 

26. (Previously Presented) The IPsec setting method of claim 21 , 
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further comprising transmitting a distribution message including at least the retrieved 
policies and generated SA parameters in response to receiving the request. 

27. (Canceled) 

28. (Previously Presented) The IPsec setting method of claim 21 , 

further compromising, upon receiving at one of the first and second IPsec processing 
apparatuses a communication to which an IPsec should be applied, the IPsec processing 
apparatus determines whether or not to request an IPsec setting from an IPsec setting 
apparatus. 

29. (Previously Presented) The IPsec setting method of claim 21 , 

wherein the first IPsec processing apparatus transmits a request for communication 
with the second IPsec processing apparatus to an IPsec setting apparatus in order to acquire a 
setting for the IPsec to be used during the communication. 

30. (Currently Amended) The IPsec setting method of claim 26, 

wherein the IPsec processing apparatuses store the retrived policies transmitted in the 
distribution message in a respective SPD, and store the SA parameters transmitted in the 
distribution message in a respective SAD^ 

31. (Canceled). 

32. (Currently Amended) The IPsec setting method of claim 21, 

further comprising receiving a second request from the first IPsec processing 
apparatus for communication with the second IPsec processing apparatus before a term of the 
validity of an SA (Security Association^ parameter expires* and in response^ generating and 
transmitting new IPsec setting to the first and second IPsec processing apparatuses. 

33. (Previously Presented) The network of claim 1 wherein the common 
encryption key transmitted by the IPsec setting apparatus in response to the request depends 
on an address of the first IPsec processing apparatus making the request. 
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34. (Previously Presented) The network of claim 1 wherein the common 
encryption key transmitted by the IPsec setting apparatus in response to the request depends 
on an address of the second IPsec processing apparatus for which communication is 
requested. 

35. (Previously Presented) The network of claim 1 wherein the common 
encryption key transmitted by the IPsec setting apparatus in response to the request depends 
on addresses of the first IPsec processing apparatus making the request and the second IPsec 
processing apparatus for which communication is requested. 

36. (New) The network of claim 1 wherein all communications between the first 
IPsec processing apparatus and the IPsec setting apparatus are encrypted, and all 
communications between the second IPsec processing apparatus and the IPsec setting 
apparatus are encrypted. 
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